[plugin] Confirm why Metamask is using seperate window for payment/password auth rather than sandboxed iframe

[robertdavid010]

Currently it appears that Metamask uses a seperate new window to load the view for the confirmation. This is of course because you cannot drop down the plugin interface window from the main browser window. The used to use sandboxed iFrames, but now Metamask uses this new window. Is this a security concern? It is a lower quality UX... so why did they do it. Because this allows for Last Pass autofill?

[nicolasbrugneaux]

just seen this issue, I'm like 0% sure they use it for UX concerns actually. Having it in an iframe makes it that "out-clicks" don't close the window, unlike the popup version. This helps with not closing your transaction window by accident